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TENT APPLICATION 



CLAIMS 



1 . A method of controlling access to patient medical information 
through a networked connection comprising: 



receiving an access request from a requestor at the aggregate 
medical server; 

determining whether the access request corresponds with the 



sending a portion of the patient medical information to the requestor 
based on the patient access instructions and the access request if the patient 
access instructions corresponds with the access request. - 

2. The method of claim 1 wherein the patient access instructions 
include alert instructions. 

3. The method of claim 2 further comprising: 

generating alerts over the network to any of a healthcare provider, 
a patient, a treatment facility or a government agency subsequent to receiving 
adverse medical data. 

4. The method of claim 1 further comprising: 

providing a hyperlink to the aggregate server wherein the hyperlink 
comprises the access request. 



receiving patient medical information at an aggregate medical 



server; 




server; 



patient access instructions; and f ' ' * ' 



5. The method of claim 4 wherein the hyperlink is provided on a web 
site for access by the requestor. 
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6. The method of claim 1 wherein determining whether the access 
request corresponds with the patient access instructions further comprises 
implementing at least one security feature. 

7. The method of claim 6 wherein the security feature is selected from 
a group consisting of a user password, a public key cryptograph, a digital 
signature, and an XML based security standard. 

8. The method of claim 1 further comprising: 

verifying a portion of the patient medical information with an outside 

server. 

9. The method of claim 8 wherein verifying the portion of the patient 
medical information comprises determining a patient eligibility. 

10. The method of claim 1 further comprising: 
updating the patient medical information. 

1 1 . The method of claim 1 wherein the patient medical information is 
selected from a group consisting of a name, a social security number, a plan 
number, personal information, medical history information, medical claims 
information, prescription information, insurance company information, billing 
information, healthcare provider information, record ID, date of service and CPT4 
code. 

12. The method of claim 1 wherein the access information comprises 
level authorization information. 
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1 3. The method of claim 12 wherein level authorization comprises 
restriction to a patient medical information category. 

14. The method of claim 13 wherein the patient medical information 
category is selected from a group consisting of laboratory services, healthcare 
providers, pharmacy services and diagnostic services. 

1 5. A computer usable medium including a program for controlling 
access to patient medical information through a networked connection 
comprising: 

computer readable program code for receiving patient medical 
information at an aggregate medical server; 

computer readable program code for receiving patient access 
instructions at the aggregate medical server; 

computer readable program code for receiving an access request 
from a requestor at the aggregate medical server; 

computer readable program code for determining whether the 
access request corresponds with the patient access instructions; and 

computer readable program code for sending a portion of the 
patient medical information to the requestor based on the patient access 
instructions and the access request if the patient access instructions corresponds 
with the access request. 

1 6. The computer usable medium of claim 1 5 wherein the patient 
access instruction includes an alert instruction. 
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1 7. The computer usable medium of claim 1 6 further comprising: 
computer readable code for generating alerts over the network to 

any of a healthcare provider, a patient, a treatment facility or a government 
5 agency subsequent to receiving adverse medical data. 

1 8. The computer usable medium of claim 1 5 further comprising: 
computer readable code for providing a hyperlink to the aggregate 

server wherein the hyperlink comprises the access request. 
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1 9. The computer usable medium of claim 1 8 wherein the hyperlink is 
provided on a web site for access by the requestor. 



„ 20. The computer usable medium of claim 1 5 wherein the computer 

ifi 1 5 readable code for determining whether the access request corresponds with the 
Jy patient access instructions comprises computer readable code for implementing 

security features. 

\l 

; j t 

fij 21 . The computer usable medium of claim 20 wherein the security 

20 feature is selected from a group consisting of: a user password, a public key 
cryptograph, a digital signature, and an XML based security standard. 



22. ' The computer usable medium of claim 15 further comprising: 

computer readable code for verifying a portion of the patient 
25 medical information with an outside server. 

23. The computer usable medium of claim 22 wherein the computer 
readable code for verifying the portion of the patient medical information 
comprises computer readable code for determining a patient's eligibility. 
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24. The computer usable medium of claim 1 5 further comprising: 
computer readable code for updating the patient medical 

information. 

25. The computer usable medium of claim 1 5 wherein the patient 
medical information is selected from a group consisting of: a name, a social 
security number, a plan number, personal information, medical history 
information, medical claims information, prescription information, insurance 
company information, billing information, and health provider information. 

26. The computer usable medium of claim 1 5 wherein the access 
information comprises level authorization information. 

27. A system for controlling access to patient medical information 
through a networked connection comprising: 

means for receiving patient medical information at an aggregate 
medical server; 

means for receiving patient access instructions at the aggregate 
medical server; 

means for receiving a request from a requestor at the aggregate 
medical server; 

means for determining whether the access request corresponds 
with the patient access instructions; and 

means for sending a portion of the patient medical information to 
the requestor based on the access instructions and the access request if the 
patient access instructions corresponds with the access request. 



